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The Claims 

The following is a listing of the claims, which are presented in accordance with revised 
37C.F.R.§U2i. 

1. (Currently amended) A method for providing accessibility to a plurality of 
remote service providers across a network via a single login to a host service provider, each of 
the plurality of remote service providers being accessible through the host service provider and 
each of the plurality of remote service providers having separate login procedures requiring data, 
the method comprising the step* of: 

the host service provider receiving the single login from a user, the host service provider 
having a universal session manager; 

the universal session manager retrieving data from a validation database based on the 
single login to the host service provider, wherein the data is effective for accessing a selected one 
of the plurality of remote service providers, and wherein the data is based at least in pan on the 
single login; 

the universal session manager transmitting said data to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
sided authentication; and 

the host service provider directing the user to the remote service provider in such manner 
that the user is *imalraneoufilv p resented with information, in a single graphical user interface, 
that is provided by both the host service provider and the remote service provider. 

2. (Original) The method of claim I, further comprising the step of connecting to a 
trusted service provider having special access requirements, wherein 
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a misted service module acts as an intermediary between the host service provider and the 
trusted service provider. 

3. (Original) The method of claim 2, wherein the trusted service module receives a 

session© from the trusted service provider. 

4. (Original) The method of claim 3, wherein the trusted service module places a 
text file on the user's network data acquisition module. 

5. (Original) The method of claim 4, wherein said text file comprises a cookie. 

6. (Original) The method of claim 1, further comprising the step of registering the 
user with the remote service provider. 

7. (Curremly amended) A system for providing accessibility to a plurality of 
remote service providers via a single login to a host service provider, each of the plurality of 
remote service providers being accessible through the host service provider and each of the 
plurality of remote service providers having separate login procedures requiring data, the system 
comprising: 

a user system having a network data acquisition module; 
a plurality of remote service providers; 

a host service provider for receiving the single login, the host service provider having a 
universal session manager; 

the universal session manager receiving data from a validation database based on the 
single login to the host service provider, the universal session manager passing the data, which is 
required for access to the remote service provider, direcdy to the remote service provider, the 
universal session manager and the remote service provider exchanging the data to effect a two- 
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sided authentication, the two-sided authentication being performed directly between the 
universal session manager and the remote service provider; and 

the validation database for storing the data for accessing the remote service provider, the 
universal session manager communicating with the validation database to obtain the data; and 

wherein the host service provider directs the user to the selected one of the plurality of 
remote service providers using the data: and 

rh<> host servk- * provider di r^rin<> The user p rh * femof? grt ™' ge provider in snrh manner 
tftflt titer is ri nfflft g nftniiriY pr^enf** witb Hf°rm?Ti nn in a single interfiles that is provided 
py both rhe hr wf service prov^er flnd, fh * "»T"tT- ffTT^'" P«wider. 

8. (Canceled) 

9. (Previously presented) The system of claim 7, said validation database further 
storing information for registering the user with the remote service provider. 

10. (Original) The system of claim 7, further comprising a trusted service module 
that serves as an intermediary between the host service module and a trusted service provider. 

1 1 . (Original) The system of claim 1 0, wherein said trusted service provider is a 
remote service provider with special access requirements. • 

12. (Original) The system of claim 7, wherein the network data acquisition module is 
an Internet browser. 

13. (Original) The system of claim 7, wherein the remote service provider further 
comprises a registration module and a login module. 

14. (Currently amended) The system of claim 1 3, wherein the login module 
receives the data for gaining access to the services provided by the remote service providerraftd 
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w heroin the host service provide* directing th* ujcr 10 the seleuod one of the plurality of 
remote :,orvioo provide uiiiag the data includofl presenting iho user with information, in a single 
gr a phical uiior interface, that to provided by both iho host uervjee provider and tho remote uerv t ee 
provid e r , 

15. (Original) The system of claim 13, wherein the registration module receives the 
data for registering a user with the remote service provider. 

16. (Previously presented) The method of claim 1, wherein the two-sided 
authentication i* a triple handshake, the triple handshake including: 

the universal session manager sending a username and password io the remote service 
provider constituting a login request; 

the remote service provider sending the universal session manager a reply to the login 

request; and 

the universal session manager directing the user to the remote service provider. 

17. (Previously presented) The method of claim 16, wherein the remote service 
provider is a distinct remote site from the host service provider, and each step of the triple 
handshake is effected directly between the universal session manager and the remote service 
provider. 

18. (Previously presented) The system of claim 7 t wherein the two-sided 
authentication is a triple handshake, each step of the triple handshake being performed directly 
between the universal session manager and the remote service provider. 

19. (Previously presented) The method of claim 1 , wherein the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled, 
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20. (Previously presented) The method of claim 1 , wherein the host service provider 
receiving the single login from the user is performed over a network- 

2 1 . (Previously presented) The system of claim 7, wherein the validation database 
transmits data to the universal session manager of the host service provider indicating which 
services the user is enrolled. 

22. (Previously presented) The method of claim 1 , wherein the host service provider 
has control of a navigation bar in the graphical user interface, and web pages from the remote 
service provider are hosted in the graphical user interface and contain a navigation bar. 

23. (New) The method of claim 1 , the information that that is provided by the host 
service provider is adjacent the information that is presented by the remote service provider. 

24. (New) The method of claim 1 , further including the host service provider 
presenting the user with information, simultaneously to the remote service provider presenting 
the user with information, both such information being displayed to the user in respective areas 
of the single graphical user interface. 

25. (New) The method of claim 1 , further including the host service provider 
presenting the user with information in a first area of the single graphical user interface, 
simultaneously with the remote service provider presenting the user with information in a second 
area of the single graphical user interface. 

26. (New) The method of claim 25, in which: 

the first area of the single graphical user interface is an outer frame of the single 
graphical user interface; and 

the second area of the single graphical user interface is a main bottom panel. 

27. (New) The method of claim 25, in which: 
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the first area of the single graphical user interface is an outer frame and top 
navigational bar of the single graphical user interface; and 

the second area of the single graphical user interface is a main bottom panel and a 
left-hand navigation bar of the single graphical user interface. 

28. (New) The method of claim 27, the host service provider controlling the first 
area, and the left-hand navigation bar in the second area providing the user with remote service 
navigation. 
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